CVE-2026-5203
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A vulnerability was found in CMS Made Simple up to version 2.2.22 in the _copyFilesToFolder function of the UserGuide Module XML Import component. Manipulation leads to path traversal, enabling remote attack. The exploit is publicly available, and the project confirmed it has been fixed in the next release.
Risk Assessment
Path traversal could allow an attacker to read or write files outside the allowed directory, threatening system confidentiality and integrity.
Recommendation
Update CMS Made Simple to the latest version that includes the fix or apply temporary mitigations such as path validation.
Other vulnerabilities in CMS Made Simple
See all- CVE-2017-8912High
CMS Made Simple (CMSMS) version 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related to the CreateTagFunction and CallUserTag functions.
- CVE-2016-7904High
CVE-2016-7904 in CMS Made Simple before version 2.1.6 has a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request.
- CVE-2023-36969High
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.
- CVE-2017-17735Critical
CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.
- CVE-2017-17734Critical
CMS Made Simple (CMSMS) before version 2.2.5 does not properly cache login information in sessions.
- CVE-2017-16783Critical
In CMS Made Simple version 2.1.6, there is a Server-Side Template Injection vulnerability via the cntnt01detailtemplate parameter.
- CVE-2017-6070Critical
CMS Made Simple version 1.x before 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.
- CVE-2023-36970Medium
A XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web scripts or HTML via the File Upload function.
Original NVD description (English source)
A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function _copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. This issue has been reported early to the project. They confirmed, that "this has already been discovered and fixed for the next release."